dsh-oracle

dsh-oracle

Fresh-context, strongly read-only second opinions for DeepSeek Harness.

Oracle receives one explicit question, optional context, and an optional list of workspace-relative text files. The host validates paths, rejects binary and sensitive files, caps the bundle size, redacts common secret formats, and supplies the result as untrusted evidence. The child has an empty tool allowlist and cannot write files, run a shell, browse, or delegate.

The default timeout is 30 minutes. timeoutMs remains configurable between 30 seconds and 2 hours.

Install

dsh plugin --profile web add link:C:/path/to/dsh-ma-plugins/dsh-oracle

The bundle patch mounts Oracle with fallbackToParent: true and no agentOptions, so it inherits the parent route. Pin a model from ~/.dsh/profiles/web/cordis.patch.yml. Cordis replaces the whole config, so restate every key:

- id: dsh-oracle
  config:
    provider: spawn
    timeoutMs: 1800000
    fallbackToParent: true
    maxFiles: 12
    maxFileBytes: 524288
    maxTotalBytes: 2097152
    agentOptions:
      provider: openai
      model: gpt-5.6-sol
      reasoningEffort: high

Do not - insert this plugin again after dsh plugin add; that double-mounts it.

agentOptionsCandidates may contain several routes. Oracle tries them in order and then uses the parent route when fallbackToParent is enabled.

The result contains an answer, confidence, evidence, risks, assumptions, next actions, the selected route, and a manifest of supplied files.